In the Rhel7&¢os7 era, the default service is controlled by SYSTEMD and the Systemctl command completes the start and stop. But not all services can be perfectly controlled by systemctl, such as the AUDITD to be mentioned today.
Edit audit.rules after adding rules, of course, through the restart service to restart the effect, but by
Systemctl Restart AUDITD
The following error will be reported:
[Email protected]]# systemctl Restart auditdfailed to restart Auditd.service:Operation refused, unit Auditd.service be requested by dependency
Because I did not edit the file under the/usr/lib/systemd/system/auditd.service, so not human modification caused the service restart failure, after the help of Google God, finally found the following reply: The original text is as follows:
The audit daemon must is controlled from the service command. It would decide which commands can be sent to systemctl and which ones is supported by legacy actions. So, you should do:service AUDITD restartunfortunately, it have to be the this.
Since Steve Grubb can't solve this problem, it seems that some of the old applications still need service to solve the traditional way .
This article is from the "Ding Chubby Blog" blog, please be sure to keep this source http://z00w00.blog.51cto.com/515114/1940135
Questions about the Linux audit service AUDITD systemctl restart